NetSight
IP …
medium6.8Public exploit code

CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.

Affected products

VendorProductAffected versions
SunJdk
through 1.5.0
Version 1.5.0
SunJre
through 1.3.1
Versions 1.3.1, 1.4.2_1, 1.4.2_2, 1.4.2_3, 1.4.2_4
SunSdk
Versions 1.3.1_01, 1.3.1_01a, 1.3.1_16, 1.3.1_18, 1.4.2, 1.4.2_03

Weakness classification

CWE-119

References